How we look after your books
Your sales, margins, party balances and GST figures are the most private numbers your business has. This page explains, in plain terms, how they are kept separate, who can see them, and how you can take them out.
- Row-level security on every query
- Two-factor codes and lockout
- Full export, any time
rakesh@shreeganesh.in
Password
rakesh@… · unknown network
Locked for 15 minutes
Row-level security
Mehta Traders asks for
Gupta Agencies · INV-0412
- Rakesh (Owner)Restored INV-0398 from the bin10:41
- Anil (Cashier)Price ₹420 → ₹440 · MCB 32A10:44
- Priya (Accounts)Closed September books10:52
- Password
- 2FA
- Lockout
- Isolation
- Audit
Your workspace is walled off inside the database
Many businesses share the same servers, so the important question is what stops one of them reading another's data. We don't leave that to the application code alone.
- Postgres row-level securityEvery business record carries its workspace ID, and the database itself filters each query by it. Even a bug in a screen cannot return another business's rows.
- Tested, not assumedOur tests sign in as one business and try to read, pay or delete another's records by their IDs. Those requests must come back empty, and they do.
- A dedicated schema, if you need oneLarger businesses can ask for their data to be kept in its own Postgres schema, apart from the shared tables. Talk to us if your auditor asks for this.
Sign-in that resists guessing
Most break-ins start with a weak or reused password. These checks run on every account.
- A real password policyAt least 8 characters with letters and numbers, and common passwords such as 12345678 or password1 are refused.
- Breached passwords refusedNew passwords are checked against a public list of passwords leaked in data breaches. Only a short, anonymous fragment of the password's hash leaves our server.
- Lockout after 5 triesFive wrong passwords for the same email from the same network lock sign-in for 15 minutes.
- Two-factor codesTurn on codes from an authenticator app. After that, a password alone is not enough to get in.
Staff see only their part of the business
The cashier, the godown clerk, the accountant and the owner need different things. You decide who gets what.
- Roles with a permission matrixUse the standard roles or build your own, ticking what each role may do in each module, from viewing to approving. The menu each person sees follows their role.
- Branch access, enforced on the serverAssign each user to the branches they work in. They only see those branches in the switcher and in every list, and the server applies the limit to every list and report, so it can't be bypassed by editing a link.
Nothing changes quietly
Books you can trust are books where every change has a name and a time against it.
- An audit log of every changeWho changed what, when, and the before and after values. Owners can read it under Settings, Activity log.
- Books-lock and period closeOnce a month or a year is filed, close it. Nothing dated in a closed period can be posted or edited, so a filed GSTR-1 can't drift from your books.
- A recycle bin, not instant deletionDeleted invoices, parties and products go to a recycle bin first. A user with permission can restore them.
Your data stays yours, and can leave with you
If you ever move to other software, you should not have to retype a single party.
- Export whenever you likeDownload any list or report as CSV. Sales, purchases, payments, products, customers and inventory export as CSV or JSON for your CA or another system. The owner can also download the whole workspace as one JSON file from Settings.
- Right to erasureWhen a customer asks to be forgotten, their personal details can be anonymised. The invoices themselves stay, because GST law needs you to keep them.
Payments are checked with the gateway
A screenshot of a payment is not a payment.
- Marked paid only after Razorpay confirmsWhen a customer pays through an invoice's payment link, our server asks Razorpay directly whether the payment went through. Only then is the payment recorded and the invoice closed. Doing this twice does not record it twice.
- Card and UPI details never reach usCustomers pay on Razorpay's own checkout page. We receive the payment status, not the card number or UPI PIN.
What we don't claim
- We do not hold a SOC 2 or ISO 27001 certificate today.
- We don't quote an uptime percentage on this site.
- Two-factor codes come from an authenticator app; SMS codes are not offered.
- Single sign-on uses OIDC. SAML is not supported yet.
If you find a security problem, please email admin@othtech.com with the details. We will reply and keep you updated until it is fixed.
Questions about security
Something not covered here? Call or WhatsApp us and you'll speak to the people who build the product.
No. Every workspace's rows are tagged with its own ID, and Postgres row-level security filters every query by that ID inside the database. We test this by trying to read and change one workspace's records from another; those requests return nothing.
Yes. Any user can turn on two-factor codes from an authenticator app such as Google Authenticator or Microsoft Authenticator. Once it is on, the code is asked for at every sign-in.
After 5 wrong attempts for the same email from the same network, sign-in is locked for 15 minutes. Weak passwords and passwords found in known data breaches are refused when they are set.
You can build roles with exactly the permissions you want, module by module, and give each user access only to the branches they work in. Branch limits are checked on the server, so changing a link in the browser does not get around them.
Yes. Lists and reports export as CSV, and sales, purchases, payments, products, customers and inventory export as CSV or JSON. The owner can also download a full export of the workspace as JSON from Settings.
Deleted records go to a recycle bin first and can be restored by a user with permission. Every change, including deletes and restores, is written to the audit log.
No, not today. We have built the controls these audits look at, such as an audit log, access control, data export and erasure, but we do not hold a certificate. If your auditor needs a security questionnaire filled in, write to us and we will answer it honestly.
Moving across? See what the Tally import brings in.
See the controls for yourself
Start a free trial and set up roles, branch access and two-factor sign-in in your own workspace. 14 days free, no card needed.
- 14 days free
- Import from Tally or Excel
- Works on any PC or phone
